EventsController ensure_registered instead of just authenticated; UsersController ensures_authenticated for destroy & edit;